n8n-security-governance

Audit AI-coded n8n workflows for security governance and change-control readiness.

84|23|Updated May 6, 2026
One-click install
npx skills add https://github.com/MorrisLu-Taipei/TigerAI-A2A-Code2n8n-Skill-Pack --skill n8n-security-governance
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: n8n-security-governance
Source: https://github.com/MorrisLu-Taipei/TigerAI-A2A-Code2n8n-Skill-Pack/tree/main/skills/tigerai/n8n-security-governance
Command: npx skills add https://github.com/MorrisLu-Taipei/TigerAI-A2A-Code2n8n-Skill-Pack --skill n8n-security-governance

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Review and enforce production-grade security and change-control readiness for AI-coded n8n workflows, ensuring traceability, auditability, and safe deployment.

Core Features & Use Cases

  • Establish scope, trust boundaries, and data handling for n8n workflows.
  • Conduct mandatory security checks (authentication, authorization, injections, secrets, auditability, and rollback).
  • Generate a formal SECURITY-REVIEW.md, SECURITY-CAVEATS.md, CHANGELOG.md, and release traceability records for governance and rollback.
  • Enforce version-control discipline and CI/CD gating for Code2n8n ports.
  • Provide observability and runtime controls for production readiness.

Quick Start

Audit a new Code2n8n port by reviewing its workflow JSON against the governance criteria and generate the audit artifacts.

Frequently Asked Questions about n8n-security-governance

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit AI-coded n8n workflows for production security governance?▼

You can enforce change-control readiness for n8n workflows by applying version-control discipline, CI/CD gating, and generating release traceability records to ensure safe deployment and rollback capabilities.

What security checks are mandatory for n8n workflow production deployments?▼

Mandatory security checks for n8n workflow production deployments include authentication, authorization, injection vulnerabilities, secrets management, auditability, and rollback guidance to ensure comprehensive governance.

How do I generate audit and traceability artifacts for Code2n8n ports?▼

Generate audit and traceability artifacts for Code2n8n ports by evaluating the workflow against governance criteria, automatically producing SECURITY-REVIEW.md, SECURITY-CAVEATS.md, and CHANGELOG.md files for formal records.

Can I use this skill to establish trust boundaries and data handling rules for n8n workflows?▼

Yes, this skill establishes scope, trust boundaries, and data handling policies for n8n workflows, ensuring AI-coded automation aligns with strict production security and governance requirements.

What limitations should I consider when enforcing CI/CD gating on n8n workflows?▼

When enforcing CI/CD gating on n8n workflows, consider that the process strictly requires version-control discipline and proper observability runtime controls to successfully gate Code2n8n ports for release.